Canonical Authd vulnerabilities

5 CVEs affecting Canonical Authd, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-102631, published 2026-10-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-9313, published 2024-10-03. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. Authd PAM module before version 0.3.5 can allow broker-managed users to impersonate any other user managed by the same broker and perform any PAM operation with it, including authenticating as them.
CVE-2025-5689, published 2025-06-16. High severity, CVSS 8.5. EPSS: 0.3% chance of exploitation in the next 30 days. A flaw was found in the temporary user record that authd uses in the pre-auth NSS. As a result, a user login for the first time will be considered to be part of the root group in the context of that…
CVE-2024-9312, published 2024-10-10. Medium severity, CVSS 6.4. EPSS: 0.3% chance of exploitation in the next 30 days. Authd, through version 0.3.6, did not sufficiently randomize user IDs to prevent collisions. A local attacker who can register user names could spoof another user's ID and gain their privileges.
CVE-2026-6970, published 2026-04-27. High severity, CVSS 7.3. EPSS: 0.1% chance of exploitation in the next 30 days. authd prior to version 0.6.4 contains a logic error in primary group ID assignment that can lead to local privilege escalation. When a user's primary group ID (GID) differs from their UID, either…
CVE-2026-102631, published 2026-10-15. Medium severity, CVSS 5.9. EPSS: 0.1% chance of exploitation in the next 30 days. In authd before 0.7.1, the user identity matching in UpdateUser (internal/users/manager.go) resolves an incoming login by the broker-scoped provider ID, but falls back to matching the username when…